Uncovering Software Provenance in Embedded Systems
Explore techniques for tracing software origins in embedded systems, enhancing security and compliance in IoT and edge computing environments.
Risk Management When Using Open-source Software in Medical Devices
Explore strategies for managing risks associated with open-source software integration in medical devices, ensuring safety and compliance in healthcare technology development.
Vulntology - A Methodology to Characterize Vulnerabilities with Granular and Intuitive Structure
Explore a methodology for characterizing vulnerabilities with granular, intuitive structure. Learn about vulnerability objects, scenarios, barriers, actions, and impacts in cybersecurity.
Hidden Vulnerabilities in Open Source
Explore hidden vulnerabilities in open source software with experts from Palo Alto Networks, uncovering potential risks and learning strategies for enhanced security.
Hijacking.gov.uk - Identifying and Communicating Risks to the Digital State
Explore digital security risks in government domains and learn effective strategies for identifying and communicating vulnerabilities to protect critical online infrastructure.
A Different Kind of S3 - First Line Security of the Supply Chain
Explore innovative approaches to supply chain security, focusing on first-line defense strategies and cutting-edge solutions for robust protection against emerging threats.
Preparing for Zero-Day: Vulnerability Disclosure in Open Source Software
Learn strategies for handling vulnerability disclosures in open source projects, including best practices for communication and mitigation, to enhance software security and protect against potential attacks.
From Log4shell to OpenSSL - Reflections on a Year of Open Source Software Security
Explore the impact of Log4shell on open source software security, progress made, and future challenges. Gain insights into enhancing OSS security and its role in critical infrastructure.
Securing Open Source Through Threat Modeling
Learn to identify attack surfaces and secure open source projects through threat modeling. Discover techniques to find vulnerabilities, analyze risks, and enhance software security.
Curating and Securing Open Source for GovCloud
Explore automated workflows for curating and securing open-source libraries in air-gapped environments, enhancing developer experience while maintaining strong controls over third-party packages.
Ketchup, Mustard, and Relish of Software Supply Chain Security - Panel Discussion
Explore open source standards and tools for enhancing software supply chain security with industry experts. Learn about S2C2F, SLSA, and FRSCA, their benefits, and how to implement them effectively.
Security Advisory Programs: Creating Transparency in Software Supply Chain
Strategies for implementing transparent security communications programs in software products, addressing customer demands for vulnerability disclosure and open source patching accountability.
SLSA in Action: Securing the Software Supply Chain
Live demonstration of securing software supply chain and achieving SLSA compliance using sample repo. OpenSSF SLSA group showcases tooling developed to meet SLSA 1.0 Build Specification, offering practical insights into implementation.
How Cybertrust Japan is Tackling OSS Security to Improve Our Digital Universe
Explore Cybertrust Japan's initiatives to enhance open-source software security, their impact on products and services, and their vision for a safer digital universe.
The Value of Community Building and Why You Should Invest in Building One
Explore community building strategies, frameworks, and best practices to create thriving networks. Learn recruitment techniques and governance models for sustainable community growth.
Mobilizing the Open Source Industry for Better Security by Default
Explore strategies to enhance open source security through industry collaboration, focusing on default protections and collective action for safer software ecosystems.
Automated Techniques for Measuring Trustworthiness of Open Source Code and Communities
Explore cutting-edge tools and methods for analyzing software security, determining project trustworthiness, and measuring against best practices in open source development.
What You Need to Know and Do About Vulnerability Disclosure
Learn about coordinated vulnerability disclosure in open source projects, its importance for security, and implications for maintainers and users.
Managing Audits for Critical Open Source Projects
Learn strategies for managing audits of critical open source projects, focusing on security, quality assurance, and best practices for maintaining project integrity.
Authenticating Supply-chain Metadata - Building Remote Code Attestations on GitHub
Explore techniques for authenticating supply-chain metadata and building remote code attestations on GitHub, enhancing software security and integrity in the development process.
Scalable Management of Vulnerabilities in Open Source
Learn strategies for efficiently managing vulnerabilities in open source projects from experts at Google and GitHub, focusing on scalable approaches and best practices.